Static reason for login failure to prevent bruteforce

This commit is contained in:
Jonny Tischbein 2018-10-03 14:32:16 +02:00
parent 3ecabe0291
commit 3c9b33176f

View file

@ -140,7 +140,7 @@ class Login extends BaseModule
}
} catch (Exception $e) {
logger('authenticate: failed login attempt: ' . notags($username) . ' from IP ' . $_SERVER['REMOTE_ADDR']);
info('Login failed: ' . $e->getMessage() . EOL);
info('Login failed. Please check your credentials.' . EOL);
goaway();
}